CVE-2008-2468

2008-09-1815:04:27

CWE-119

[email protected]

web.nvd.nist.gov

buffer overflows

qip server service

qipsrvr.exe

landesk management suite

security suite

server manager 8.8

stringtomap

stringsize

nvd

cve-2008-2468

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.403 Medium

EPSS

Percentile

97.3%

JSON

Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.

Affected configurations

NVD

Node

landesklandesk_management_suiteRange≤8.8

landesklandesk_management_suiteMatch8.7

landesklandesk_security_suiteRange≤8.8

landesklandesk_security_suiteMatch8.7

landesklandesk_server_managerRange≤8.8

landesklandesk_server_managerMatch8.7

CPENameOperatorVersion
landesk:landesk_management_suitelandesk landesk management suitele8.8
landesk:landesk_management_suitelandesk landesk management suiteeq8.7
landesk:landesk_security_suitelandesk landesk security suitele8.8
landesk:landesk_security_suitelandesk landesk security suiteeq8.7
landesk:landesk_server_managerlandesk landesk server managerle8.8
landesk:landesk_server_managerlandesk landesk server managereq8.7

CPE	Name	Operator	Version
landesk:landesk_management_suite	landesk landesk management suite	le	8.8
landesk:landesk_management_suite	landesk landesk management suite	eq	8.7
landesk:landesk_security_suite	landesk landesk security suite	le	8.8
landesk:landesk_security_suite	landesk landesk security suite	eq	8.7
landesk:landesk_server_manager	landesk landesk server manager	le	8.8
landesk:landesk_server_manager	landesk landesk server manager	eq	8.7